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DETAILED ACTION 
Response to Amendment 

1 . This action is in response to the amendment received on June 30, 2009. Claims 
1-13, 19-29, and 31-40 were pending consideration. No claims have been added or 
canceled by virtue of the amendment. 

2. Claims 1-13, 19-29, and 31-40 are currently being considered. 

Information Disclosure Statement 

3. An initialed and dated copy of Applicant's IDS (form 1449), received on 
09/09/2009, is attached to this Office Action. 

Response to Arguments 

Applicant's arguments filed June 30, 2009 have been fully considered but they 
are not persuasive for the following reasons: 

Regarding claim 1, the Applicant argues that the Cited Prior Art (CPA), Sankar 
(U.S. Patent 7,065,706), does not teach selecting a first set of security information, 
wherein the first set of security information comprises security settings. This argument 
is not found persuasive. The Applicant argues that the XML tags cannot be equated to 
"first set of security information." However, security information is a broad term, and so 
are security settings. The Examiner interprets security settings as information that is 
parsed to determine what security is to be applied. Given this interpretation, the XML 
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tags, which contain security attributes, are interpreted as the first security information 
(column 2, lines 25-35). Furthermore, the Applicant argues that the CPA does not teach 
"selecting a second set of security information." This argument is also not found 
persuasive. The first set of security information being the XML tags, the second set of 
security information retrieved from it in the form of security attributes (column 2, lines 
35-40). Therefore, it is respectfully asserted that the CPA does teach selecting a 
second set of security information. Furthermore, regarding claim 19, the Applicant 
argues that the CPA does not teach "sets of security information." This argument is 
also not found persuasive. The multiple XML tags which can be present are interpreted 
as the "sets" as an XML tag from a set of XML tags is selected and parsed (column 2, 
lines 25-39), and this XML tag can yield multiple security attributes (sets) (column 2, 
lines 35-40). Therefore, this argument is not found persuasive, and the rejection is 
maintained as given below. 



Claim Rejections - 35 USC §102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
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only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

Claims 1-13, 19-29, and 31-40 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Sankar (U.S. Patent 7,065,706). 

Regarding claim 1 , Sankar discloses: 
A method, comprising: 

on a device configured to receive messages, receiving a message (column 2, 
lines 35-39: received message); 

selecting a first set of security information (column 2, lines 25-35: parsing XML 
tags to get information) from a first plurality of sets of security information (column 2, 
lines 25-35: XML tags) as a function of a property of the message (column 2, lines 25- 
40: wherein the message is received and then the XML tags are parsed); 

selecting a second set of security information (column 2, lines 35-40: retrieving 
the attributes (second set of security information) from the XML tags and determining 
identifying relevant attributes (selecting second set)) from a second plurality of sets of 
security information (column 2, lines 35-40: retrieving all the attributes) as a function of 
the first set (column 2, lines 24-48: wherein the attributes are retrieved by parsing the 
XML tags); and 

applying the second set of security information to the message (column 2, lines 
43-46: determining security attributes to determine the operation to be performed on 
the message). 
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Claim 2 is rejected as applied above in rejecting claim 1 . Furthermore, Sankar 
discloses: 

The method of claim 1 , wherein applying the second set of security information to 
the message further comprises applying security information derived from the first set 
(column 2, lines 35-40: retrieving the attributes (second set of security information) from 
the XML tags and determining identifying relevant attributes (selecting second set)). 

Claim 3 is rejected as applied above in rejecting claim 1 . Furthermore, Sankar 
discloses: 

The method of claim 1 , further comprising determining whether the message 
satisfies a security requirement derived from security information of the second set 
(column 4, lines 38-44: determining if the message needs to be re-routed based on a 
relevant attribute derived from the XML tag). 

Claim 4 is rejected as applied above in rejecting claim 3. Furthermore, Sankar 
discloses: 

The method of claim 3, wherein determining whether the message satisfies a 
security requirement derived from security information of the second set further 
comprises determining whether the message satisfies a security requirement derived 
from security information in the first set (column 4, lines 38-44: determining if the 
message needs to be re-routed based on a relevant attribute derived from the XML tag). 



Application/Control Number: 10/779,922 Page 6 

Art Unit: 2431 

Claim 5 is rejected as applied above in rejecting claim 3. Furthermore, Sankar 
discloses: 

The method of claim 3, further comprising rejecting the message if the message 
does not satisfy the security requirement (column 4, lines 38-44: determining if the 
message needs to be re-routed based on a relevant attribute derived from the XML tag). 

Claim 6 is rejected as applied above in rejecting claim 5. Furthermore, Sankar 
discloses: 

The method of claim 5, further comprising accepting the message if the message 
satisfies all security requirements included in the second set (column 4, lines 38-44: 
determining if the message needs to be re-routed based on a relevant attribute derived 
from the XML tag, wherein if the router has the functionality, the message is not re- 
routed). 

Claim 7 is rejected as applied above in rejecting claim 6. Furthermore, Sankar 
discloses: 

The method of claim 6, wherein the message is received after transmission from 
a sender (column 4, lines 7-15: message is received at a message router after it is sent 
by a sender). 

Claim 8 is rejected as applied above in rejecting claim 1 . Furthermore, Sankar 
discloses: 
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The method of claim 1 , wherein the message is to be transmitted to another 
process (column 4, lines 38-44: determining if the message needs to be re-routed 
based on a relevant attribute derived from the XML tag, wherein if the router has the 
functionality, the message is not re-routed). 

Claim 9 is rejected as applied above in rejecting claim 8. Furthermore, Sankar 
discloses: 

The method of claim 8, further comprising securitizing the message before the 
message is transmitted (column 4, lines 17-21 : wherein one of the services provided is 
XML encryption). 

Claim 10 is rejected as applied above in rejecting claim 1. Furthermore, Sankar 
discloses: 

The method of claim 1 , wherein the second plurality of sets of security 
information are shared between nodes of a network (column 4, lines 7-15: wherein the 
message router re-routes the message to the appropriate node or process). 

Claim 1 1 is rejected as applied above in rejecting claim 1 . Furthermore, Sankar 
discloses: 

The method of claim 1 , wherein the first set is selected using an XPath-based 
expression to match a preselected pattern (column 5, lines 29-34: vocabulary library 
which is used after the XML tags are parsed). 
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Claim 12 is rejected as applied above in rejecting claim 1. Furthermore, Sankar 
discloses: 

The method of claim 1 , wherein the first set is selected using Simple Object 
Access Protocol (SOAP) action (column 4, lines 24-26: SOAP). 

Claim 13 is rejected as applied above in rejecting claim 1. Furthermore, Sankar 
discloses: 

A machine readable medium having instructions for performing the method of 
claim 1 (column 10, lines 24-44: computer readable medium). 

Regarding claim 19, Sankar discloses: 
A system comprising: 
a processor (column 4, lines 8-15); 

a memory coupled to the processor to store at least a portion of a plurality of 
datastores (column 4, lines 8-15); 

a first datastore to include a first plurality of sets of security information (column 
2, lines 25-35: parsing XML tags to get information) related to an application residing in 
the system (column 2, lines 25-40: wherein the message is received and then the XML 
tags are parsed to determine which application/process the message is to be re-routed 
to); 
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a second datastore to include a second plurality of sets of security information 
(column 2, lines 35-40: retrieving the attributes (second set of security information), 
wherein a set of the first plurality of sets is associated with a set of the second plurality 
of sets (column 2, lines 24-48: wherein the attributes are retrieved by parsing the XML 
tags); and 

a module to select a first set from the first plurality of sets as a function of a 
property of a received message (column 2, lines 25-40: wherein the message is 
received and then the XML tags are parsed). 

Claim 20 is rejected as applied above in rejecting claim 19. Furthermore, Sankar 
discloses: 

The system of claim 19 wherein the first and second datastores are part of a 
single larger datastore (column 4, lines 56-65: service registry). 

Claim 21 is rejected as applied above in rejecting claim 19. Furthermore, Sankar 
discloses: 

The system of claim 19 wherein the module is further to apply security 
information included in a second set of the second plurality of sets to the received 
message (column 2, lines 43-46: determining security attributes to determine the 
operation to be performed on the message). 
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Claim 22 is rejected as applied above in rejecting claim 21 . Furthermore, Sankar 
discloses: 

The system of claim 21 , wherein the module is further to apply security 
information included in the first set to the received message (column 2, lines 43-46: 
determining security attributes to determine the operation to be performed on the 
message). 

Claim 23 is rejected as applied above in rejecting claim 21 . Furthermore, Sankar 
discloses: 

The system of claim 21 , wherein the module is further to determine whether the 
received message satisfies a security requirement included in security information of the 
second set (column 4, lines 38-44: determining if the message needs to be re-routed 
based on a relevant attribute derived from the XML tag, wherein if the router has the 
functionality, the message is not re-routed). 

Claim 24 is rejected as applied above in rejecting claim 23. Furthermore, Sankar 
discloses: 

The system of claim 23, wherein the module is further to reject the message if 
the message does not satisfy the security requirement (column 4, lines 38-44: 
determining if the message needs to be re-routed based on a relevant attribute derived 
from the XML tag). 
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Claim 25 is rejected as applied above in rejecting claim 24. Furthermore, Sankar 
discloses: 

The system of claim 24, wherein the module is further to accept the message if 
the message satisfies all security requirements included in the security information of 
the second set (column 4, lines 38-44: determining if the message needs to be re- 
routed based on a relevant attribute derived from the XML tag, wherein if the router has 
the functionality, the message is not re-routed). 

Claim 26 is rejected as applied above in rejecting claim 19. Furthermore, Sankar 
discloses: 

The system of claim 19, further comprising a third datastore to include mappings 
from sets of the first plurality of sets to sets of the second plurality of sets, wherein the 
second set is associated with the first set by a mapping included in the third datastore 
(column 2, lines 43-46: determining security attributes to determine the operation to be 
performed on the message). 

Claim 27 is rejected as applied above in rejecting claim 19. Furthermore, Sankar 
discloses: 

The system of claim 19, wherein the module is to select the first set using an 
XPath-based expression to match a preselected pattern (column 5, lines 29-34: 
vocabulary library which is used after the XML tags are parsed). 
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Claim 28 is rejected as applied above in rejecting claim 19. Furthermore, Sankar 
discloses: 

The system of claim 19, wherein the module is to select the first set using a 
predetermined Simple Object Access Protocol (SOAP) action (column 4, lines 24-26: 
SOAP). 

Claim 29 is rejected as applied above in rejecting claim 19. Furthermore, Sankar 
discloses: 

The system of claim 19, wherein the second plurality of sets are shared between 
nodes of the system (column 4, lines 7-15: wherein the message router re-routes the 
message to the appropriate node or process). 

Regarding claim 31, Sankar discloses: 

A machine-readable medium having components, comprising: 
steps for receiving a message (column 2, lines 35-39: received message); 
steps for selecting a first set of security information (column 2, lines 25-35: 
parsing XML tags to get information) from a first plurality of sets of security information 
(column 2, lines 25-35: XML tags) as a function of a property of the message (column 
2, lines 25-40: wherein the message is received and then the XML tags are parsed), 
wherein the first set of security information comprises security settings that define types 
of messages that must be secured and wherein the types of messages that must be 
secured are defined and provided by an application developer (column 2, lines 25-35: 
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parsing XML tags to get information about what security functions to perform on the 
message); 

steps for selecting a second set of security information (column 2, lines 35-40: 
retrieving the attributes (second set of security information) from the XML tags and 
determining identifying relevant attributes (selecting second set)) from a second plurality 
of sets of security information (column 2, lines 35-40: retrieving all the attributes) as a 
function of the first set (column 2, lines 24-48: wherein the attributes are retrieved by 
parsing the XML tags), wherein the second set of security settings that specify particular 
operations and settings for securing the messages, wherein the particular operations 
and settings comprise algorithms to be used in signing and encrypting the messages 
(column 4, lines 7-26: XML encryption and XML signature are functions provided for by 
the message router and stored on a registry server); and 

means for applying the second set of security information to the message 
(column 2, lines 43-46: determining security attributes to determine the operation to be 
performed on the message). 

Claim 32 is rejected as applied above in rejecting claim 31 . Furthermore, Sankar 
discloses: 

The machine-readable storage medium of claim 31, further comprising means 
for determining whether the message satisfies a security requirement derived from the 
first and/or second sets (column 4, lines 38-44: determining if the message needs to be 
re-routed based on a relevant attribute derived from the XML tag). 
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Claim 33 is rejected as applied above in rejecting claim 32. Furthermore, Sankar 
discloses: 

The machine-readable storage medium of claim 32, further comprising means for 
rejecting the message if the message does not satisfy the security requirement (column 
4, lines 38-44: determining if the message needs to be re-routed based on a relevant 
attribute derived from the XML tag). 

Claim 34 is rejected as applied above in rejecting claim 32. Furthermore, Sankar 
discloses: 

The machine-readable storage medium of claim 32, further comprising means for 
accepting the message if the message satisfies all security requirements derived from 
the first and second sets (column 4, lines 38-44: determining if the message needs to 
be re-routed based on a relevant attribute derived from the XML tag, wherein if the 
router has the functionality, the message is not re-routed). 

Claim 35 is rejected as applied above in rejecting claim 34. Furthermore, Sankar 
discloses: 

The machine-readable storage medium of claim 34, wherein the message is 
received after transmission from a sender (column 4, lines 7-15: message is received 
at a message router after it is sent by a sender). 
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Claim 36 is rejected as applied above in rejecting claim 31 . Furthermore, Sankar 
discloses: 

The machine-readable storage medium of claim 31, wherein the message is to 
be transmitted to another process (column 4, lines 38-44: determining if the message 
needs to be re-routed based on a relevant attribute derived from the XML tag, wherein if 
the router has the functionality, the message is not re-routed). 

Claim 37 is rejected as applied above in rejecting claim 36. Furthermore, Sankar 
discloses: 

The machine-readable storage medium of claim 36, further comprising means for 
securitizing the message before the message is transmitted (column 4, lines 17-21: 
wherein one of the services provided is XML encryption). 

Claim 38 is rejected as applied above in rejecting claim 31 . Furthermore, Sankar 
discloses: 

The machine-readable storage medium of claim 31, wherein the second plurality of sets 
of security information are shared between nodes of a network (column 4, lines 7-15: 
wherein the message router re-routes the message to the appropriate node or process). 

Claim 39 is rejected as applied above in rejecting claim 31 . Furthermore, Sankar 
discloses: 
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The machine-readable storage medium of claim 31, wherein the means for 
selecting the first set uses an XPath-based expression to match a preselected pattern 
(column 5, lines 29-34: vocabulary library which is used after the XML tags are parsed). 

Claim 40 is rejected as applied above in rejecting claim 31 . Furthermore, Sankar 
discloses: 

The machine-readable storage medium of claim 31, wherein the steps for 
selecting the first set selects the first set using Simple Object Access Protocol (SOAP) 
actions (column 4, lines 24-26: SOAP). 



Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to KAVEH ABRISHAMKAR whose telephone number is 
(571)272-3786. The examiner can normally be reached on Monday thru Friday 8-5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, William Korzuch can be reached on 571-272-7589. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Kaveh Abrishamkar/ 
Primary Examiner, Art Unit 2431 

/K. A./ 
09/30/2009 

Primary Examiner, Art Unit 2431 



